>Thanks Len.. but, > >What exactly should I search for in the log file?
strings you take from the message you showed us here. >There are multiple >messages sent to this user on the system from yesterdays log file. well, THINK HARDER !! :))) > Clearly I >am looking for someone whom may have 'logged' into the server using the root >account to send email. BS, all headers are forgeable. >What does that syntax look like in the log file. look in the log file SMTPD lines + the pid number-per-session is imail receiving sessions. SMTP- lines + pid number-per-session is imail sending mail. concept: the msg had to be sent in to IMail via SMTPD session, and the sent out by IMail in SMTP- session. searching through log files is an admin skill, develop it. Len Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
